PT-2018-16209 · Pixel & Tonic · Craft Cms

Published 2018-01-01 · Updated 2022-05-13 · CVE-2018-3814

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Craft CMS version 2.6.3000

Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by using the "Assets->Upload files" screen and then the "Replace it" option, which enables a .jpg file to have embedded PHP code, and then be renamed to a .php extension.

Recommendations For Craft CMS version 2.6.3000, consider restricting access to the "Assets->Upload files" screen and the "Replace it" option to minimize the risk of exploitation. As a temporary workaround, consider disabling the ability to upload files with embedded PHP code until a patch is available.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-3814

GHSA-R342-VJC4-WRMJ

Affected Products

Craft Cms

References · 6

• 🔥 https://github.com/Snowty/myCVE/blob/master/CraftCMS-2.6.3000/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-3814 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3814 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r342-vjc4-wrmj · Vendor Advisory
• https://github.com/craftcms/cms · Note
• https://web.archive.org/web/20170612231205/http://0day5.com/archives/4122 · Note